Cybersecurity Architect

Ensemble RCM LLC

offers a comprehensive benefits package designed to support the physical, emotional, and financial health of you and your family, including healthcare, time off, retirement, and well-being programs. You can also work toward a professional certification relevant to your field, with

tuition reimbursement

available. The company runs

quarterly and annual incentive programs

for employees who keep raising the bar for themselves and the organization.

In this remote role based in

Blue Ash, OH , the Cybersecurity Architect designs, reviews, and improves security architecture across infrastructure, applications, cloud platforms, identity services, networks, and data environments. You will help advance the organization's cybersecurity strategy through threat modeling, architecture and design reviews, and translating

HIPAA ,

HITRUST , and

NIST CSF

requirements into technical controls.

Responsibilities

Design and review security architectures for

cloud, infrastructure, application, identity, network, and data

environments using secure-by-default principles and established security patterns.

Develop and maintain threat models for assigned systems, identifying attack surfaces, security risks, and recommended mitigations.

Participate in architecture and design reviews, providing security guidance and recommendations to project and engineering teams.

Contribute to the cybersecurity architecture roadmap and evaluate emerging technologies for future-state security initiatives.

Serve as a subject matter expert on security architecture for engineering, infrastructure, and product teams.

Promote zero-trust security principles, least-privilege access models, and defense-in-depth strategies across enterprise systems.

Mentor engineers and technical teams on secure design practices and adherence to approved security standards and patterns.

Translate regulatory and security framework requirements, including

HIPAA, HITRUST, and NIST CSF , into technical architecture requirements and control mappings.

Collaborate with

Legal, Privacy, Compliance , and

GRC

teams to align solutions with internal policies and external regulatory requirements.

Conduct risk assessments and develop architecture recommendations, remediation strategies, and mitigation plans for leadership review.

Act as a liaison between cybersecurity, infrastructure, application development, and business stakeholders.

Provide security architecture consultation for new technology initiatives, projects, and third-party vendor integrations.

Support customer security reviews and third-party due diligence by articulating architecture decisions and validating security controls.

Partner with cybersecurity analysts, engineers, and architects to ensure effective security controls are implemented across enterprise systems, cloud platforms, and applications.

Requirements

Bachelor’s degree in Computer Science, Information Security, Information Technology, or related field (or equivalent combination of education and relevant experience).

5 to 8 years

of overall information security experience.

Minimum of

2 years

of experience in a cybersecurity or security architecture role.

Experience designing and securing

cloud, application, infrastructure, and data

environments.

Experience conducting threat modeling, architectural reviews, and security risk assessments.Experience working within regulated environments and supporting compliance requirements such as

HIPAA, HITRUST, and NIST CSF .

Security architecture design and review methodologies; threat modeling, attack surface analysis, and risk assessment.

Cloud security architecture experience across

AWS

and

Azure .

Knowledge of secure application, infrastructure, network, identity, and data architecture principles, including

Zero Trust ,

least privilege , and

defense-in-depth .

Knowledge of HIPAA, HITRUST, NIST CSF, and healthcare security requirements.

Strong communication and stakeholder management skills with the ability to translate technical security requirements into business-focused recommendations.

Ability to influence engineering teams and mentor technical staff on secure design practices.

Experience collaborating across cybersecurity, engineering, privacy, compliance, legal, and business organizations.

Strong analytical, problem-solving, and decision-making capabilities.

Must be inquisitive and demonstrate openness to innovation, including AI, to explore better processes and ways to alleviate friction and improve patient and client experiences.

Remote role with ability to travel and work onsite at client, temporary, or corporate office locations as business needs require.

Must reside and be authorized to work within the

United States .

Preferred Certifications

CISSP (Certified Information Systems Security Professional)

CCSP (Certified Cloud Security Professional)

AWS Certified Security - Specialty

Microsoft Azure Security Engineer Associate (AZ-500)

Equivalent cloud security or architecture certification

Compensation This position pays between

$163,700

and

$245,500

per year based on experience. Compensation decisions consider many job-related factors, including geographic location; knowledge; skills; relevant experience; education; licensure; internal equity; and time in position. A candidate entry rate of pay does not typically fall at the minimum or maximum of the role’s range.

Technologies AWS ,

Azure

#J-18808-Ljbffr